Senior ISSO - TS/SCI | Flexible Hours & PTO

Base-2 Solutions; Norfolk (VA); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Company-paid health premiums

Company-paid dental premiums

Company-paid vision premiums

Life and disability insurance

401(k) with 8% total company match

PTO and floating holidays

Flexible work schedules

Job summary

Base-2 Solutions seeks an Information System Security Officer to collaborate with developers, admins, and testers to ensure systems achieve Authority to Operate (ATO) and remain compliant with RMF and security controls. The role involves maintaining SSPs, SCTMs, STPs, and POAMs, loading STIGs and ACAS findings, and guiding remediation efforts.

The candidate will engage with PAT, ISSMs, and SCAs, and will help implement measures to mitigate vulnerabilities while documenting outcomes for audits

Qualifications

• Bachelor's degree in computer science, software engineering, or a field applicable to the position required.

Responsibilities

• Work with application leads, system admins, database admins, developers, and testers to ensure systems are security compliant and achieve or maintain ATO.
• Follow the RMF process for full test, partial test, CONMON, and no test.
• Update Xacta documentation including SSPs, SCTM, STPs, and POAMs.
• Load artifacts such as STIG checklists and ACAS scans.
• Help implement STIG checklists and mitigate scan findings.
• Answer questions to ensure systems are developed with security compliance built in.
• Support security assessment events and respond to all questions from PAT team, ISSMs, and SCAs.

Skills

RMF process

Xacta

SSPs

STIGs

ACAS

Security policies

Risk assessments

Incident response

Regulatory compliance

Education

Bachelor's degree in computer science/engineering or related field

9+ years of relevant experience

Equivalent experience accepted

Tools

Xacta

Job description

Base-2 Solutions seeks an Information System Security Officer to collaborate with developers, admins, and testers to ensure systems achieve Authority to Operate (ATO) and remain compliant with RMF and security controls. The role involves maintaining SSPs, SCTMs, STPs, and POAMs, loading STIGs and ACAS findings, and guiding remediation efforts.

The candidate will engage with PAT, ISSMs, and SCAs, and will help implement measures to mitigate vulnerabilities while documenting outcomes for audits